Tobias Frauenschläger 76b1300adb ML-KEM fixes ...

* DTLS 1.3 cookie and CH frag handling
* static memory handling
* Fix memory leak in TLS server PQC handling in case of ECH
* Make sure hybrids are actually tested in testsuite

2026-03-17 12:43:15 +01:00

..

port

Add common SHA copy/free helpers with leak-safe msg buffer handling and copy/free crypto callbacks to replicate the non-callback code behavior when using MAX3266X_SHA_CB.

2026-03-04 10:27:22 -07:00

aes.h

wolfcrypt/src/aes.c, wolfcrypt/src/cmac.c, wolfssl/wolfcrypt/aes.h, wolfssl/wolfcrypt/types.h: optimizations to mitigate performance regressions from 299e7bd097 (#9783):

2026-02-24 13:59:12 -06:00

arc4.h

update Copyright year

2026-02-18 09:52:21 -07:00

ascon.h

update Copyright year

2026-02-18 09:52:21 -07:00

asn_public.h

Address code review

2026-03-11 10:21:17 +01:00

asn.h

Implement OCSP responder

2026-03-11 10:21:16 +01:00

async.h

update Copyright year

2026-02-18 09:52:21 -07:00

blake2-impl.h

update Copyright year

2026-02-18 09:52:21 -07:00

blake2-int.h

update Copyright year

2026-02-18 09:52:21 -07:00

blake2.h

update Copyright year

2026-02-18 09:52:21 -07:00

camellia.h

update Copyright year

2026-02-18 09:52:21 -07:00

chacha20_poly1305.h

update Copyright year

2026-02-18 09:52:21 -07:00

chacha.h

update Copyright year

2026-02-18 09:52:21 -07:00

cmac.h

update Copyright year

2026-02-18 09:52:21 -07:00

coding.h

update Copyright year

2026-02-18 09:52:21 -07:00

compress.h

update Copyright year

2026-02-18 09:52:21 -07:00

cpuid.h

update Copyright year

2026-02-18 09:52:21 -07:00

cryptocb.h

Support for ML-DSA in PKCS#11

2026-03-02 11:45:11 +01:00

curve448.h

update Copyright year

2026-02-18 09:52:21 -07:00

curve25519.h

update Copyright year

2026-02-18 09:52:21 -07:00

des3.h

update Copyright year

2026-02-18 09:52:21 -07:00

dh.h

20260204-linuxkm-fips-hash: more fixes+improvements from peer and AI review:

2026-02-20 11:09:37 -06:00

dilithium.h

Support for ML-DSA in PKCS#11

2026-03-02 11:45:11 +01:00

dsa.h

update Copyright year

2026-02-18 09:52:21 -07:00

ecc.h

Implement OCSP responder

2026-03-11 10:21:16 +01:00

eccsi.h

update Copyright year

2026-02-18 09:52:21 -07:00

ed448.h

update Copyright year

2026-02-18 09:52:21 -07:00

ed25519.h

update Copyright year

2026-02-18 09:52:21 -07:00

error-crypt.h

wolfcrypt/src/hpke.c, wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: implement RFC 9180 overflow checks on context->seq in wc_HpkeContextSealBase() and wc_HpkeContextOpenBase(), and add SEQ_OVERFLOW_E to wolfCrypt_ErrorCodes (Fenrir M-70).

2026-02-27 23:40:37 -06:00

ext_lms.h

update Copyright year

2026-02-18 09:52:21 -07:00

ext_mlkem.h

update Copyright year

2026-02-18 09:52:21 -07:00

ext_xmss.h

update Copyright year

2026-02-18 09:52:21 -07:00

falcon.h

update Copyright year

2026-02-18 09:52:21 -07:00

fe_448.h

update Copyright year

2026-02-18 09:52:21 -07:00

fe_operations.h

update Copyright year

2026-02-18 09:52:21 -07:00

fips_test.h

update Copyright year

2026-02-18 09:52:21 -07:00

ge_448.h

update Copyright year

2026-02-18 09:52:21 -07:00

ge_operations.h

update Copyright year

2026-02-18 09:52:21 -07:00

hash.h

update Copyright year

2026-02-18 09:52:21 -07:00

hmac.h

Add STM32 hardware HMAC support

2026-02-19 09:11:02 -08:00

hpke.h

update Copyright year

2026-02-18 09:52:21 -07:00

include.am

FIPS 205, SLH-DSA: implementation

2026-03-09 19:06:34 +10:00

integer.h

update Copyright year

2026-02-18 09:52:21 -07:00

kdf.h

update Copyright year

2026-02-18 09:52:21 -07:00

libwolfssl_sources_asm.h

update Copyright year

2026-02-18 09:52:21 -07:00

libwolfssl_sources.h

update Copyright year

2026-02-18 09:52:21 -07:00

lms.h

update Copyright year

2026-02-18 09:52:21 -07:00

logging.h

update Copyright year

2026-02-18 09:52:21 -07:00

md2.h

update Copyright year

2026-02-18 09:52:21 -07:00

md4.h

update Copyright year

2026-02-18 09:52:21 -07:00

md5.h

update Copyright year

2026-02-18 09:52:21 -07:00

mem_track.h

update Copyright year

2026-02-18 09:52:21 -07:00

memory.h

ML-KEM fixes

2026-03-17 12:43:15 +01:00

misc.h

update Copyright year

2026-02-18 09:52:21 -07:00

mlkem.h

update Copyright year

2026-02-18 09:52:21 -07:00

mpi_class.h

update Copyright year

2026-02-18 09:52:21 -07:00

mpi_superclass.h

update Copyright year

2026-02-18 09:52:21 -07:00

oid_sum.h

update Copyright year

2026-02-18 09:52:21 -07:00

pkcs7.h

pkcs7: add RSA-PSS support for SignedData

2026-02-25 11:02:47 +02:00

pkcs11.h

Support for ML-DSA in PKCS#11

2026-03-02 11:45:11 +01:00

pkcs12.h

update Copyright year

2026-02-18 09:52:21 -07:00

poly1305.h

update Copyright year

2026-02-18 09:52:21 -07:00

pwdbased.h

update Copyright year

2026-02-18 09:52:21 -07:00

random.h

update Copyright year

2026-02-18 09:52:21 -07:00

rc2.h

update Copyright year

2026-02-18 09:52:21 -07:00

ripemd.h

update Copyright year

2026-02-18 09:52:21 -07:00

rng_bank.h

wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c:

2026-01-09 17:52:37 -06:00

rsa.h

Implement OCSP responder

2026-03-11 10:21:16 +01:00

sakke.h

update Copyright year

2026-02-18 09:52:21 -07:00

selftest.h

update Copyright year

2026-02-18 09:52:21 -07:00

settings.h

ML-KEM fixes

2026-03-17 12:43:15 +01:00

sha3.h

update Copyright year

2026-02-18 09:52:21 -07:00

sha256.h

Refactor to use HASH_KEEP option instead of dedicated context for SHA, also add HASH_KEEP to sha1 context with correct init/free calls

2026-03-04 10:27:22 -07:00

sha512.h

Refactor to use HASH_KEEP option instead of dedicated context for SHA, also add HASH_KEEP to sha1 context with correct init/free calls

2026-03-04 10:27:22 -07:00

sha.h

Refactor to use HASH_KEEP option instead of dedicated context for SHA, also add HASH_KEEP to sha1 context with correct init/free calls

2026-03-04 10:27:22 -07:00

signature.h

update Copyright year

2026-02-18 09:52:21 -07:00

siphash.h

update Copyright year

2026-02-18 09:52:21 -07:00

sm2.h

update Copyright year

2026-02-18 09:52:21 -07:00

sm3.h

update Copyright year

2026-02-18 09:52:21 -07:00

sm4.h

update Copyright year

2026-02-18 09:52:21 -07:00

sp_int.h

update Copyright year

2026-02-18 09:52:21 -07:00

sp.h

RISC-V 32 no mul SP C: implement multiplication

2026-03-04 19:23:20 +10:00

sphincs.h

update Copyright year

2026-02-18 09:52:21 -07:00

srp.h

update Copyright year

2026-02-18 09:52:21 -07:00

tfm.h

update Copyright year

2026-02-18 09:52:21 -07:00

types.h

Implement OCSP responder

2026-03-11 10:21:16 +01:00

visibility.h

update Copyright year

2026-02-18 09:52:21 -07:00

wc_encrypt.h

update Copyright year

2026-02-18 09:52:21 -07:00

wc_lms.h

update Copyright year

2026-02-18 09:52:21 -07:00

wc_mlkem.h

wolfssl/wolfcrypt/wc_port.h, wolfssl/wolfcrypt/sha256.h, wolfssl/wolfcrypt/sha512.h, wolfssl/wolfcrypt/sp.h, wolfssl/wolfcrypt/wc_mlkem.h: add WC_NO_INLINE.

2026-02-23 23:03:08 -06:00

wc_pkcs11.h

Support for ML-DSA in PKCS#11

2026-03-02 11:45:11 +01:00

wc_port.h

Add Zephyr 4.1+ build compatibility for wolfssl_tls_sock sample. Replace removed Kconfig options (PTHREAD_IPC, POSIX_CLOCK, NET_SOCKETS_POSIX_NAMES) with version-conditional config fragments and fix min/max macro collision with Zephyr's sys/util.h.

2026-03-10 14:23:47 -06:00

wc_slhdsa.h

FIPS 205, SLH-DSA: implementation

2026-03-09 19:06:34 +10:00

wc_xmss.h

update Copyright year

2026-02-18 09:52:21 -07:00

wolfentropy.h

update Copyright year

2026-02-18 09:52:21 -07:00

wolfevent.h

update Copyright year

2026-02-18 09:52:21 -07:00

wolfmath.h

update Copyright year

2026-02-18 09:52:21 -07:00

xmss.h

update Copyright year

2026-02-18 09:52:21 -07:00